PT-2026-97983

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth RFCOMM component where the rfcomm recv frame function casts skb-data to struct rfcomm hdr and dereferences hdr-addr and hdr-ctrl without first validating...

PT-2026-98042

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth L2CAP implementation where the l2cap recv frame function reads the two-byte Protocol Service Multiplexer PSM at the start of the payload unconditionally...

PT-2026-105006

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate connectionless PSM length Connectionless L2CAP frames carry a two-byte PSM at the start of the payload. l2cap recv frame currently reads that PSM unconditionally after validating only the outer L2CAP...

PT-2026-104971

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in rfcomm recv frame rfcomm recv frame casts skb-data to struct rfcomm hdr and dereferences hdr-addr and hdr-ctrl without validating skb-len first. A truncated frame with skb-len less than t...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: btmtksdio: fixed a use-after-free in btmtksdiorecvevent We should no longer access the skb buffer data after the hcirecvframe function is called. 39.634809 BUG: KASAN: use-after-free in btmtksdiorecvevent+0x1b0...

EUVD-2026-45719

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix UAF in isorecvframe isorecvframe reads conn-sk under isoconnlock but releases the lock before using sk, with no reference held. A concurrent isosockkill can free sk in that window, causing use-after-free on...

kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold

A flaw was found in the Linux kernel's Bluetooth SCO Synchronous Connection-Oriented protocol implementation. The scorecvframe function fails to properly hold a reference to a socket after releasing a lock. This oversight allows a concurrent operation to free the socket while it is still being...

CVE-2026-31408

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix use-after-free in scorecvframe due to missing sockhold scorecvframe reads conn-sk under scoconnlock but immediately releases the lock without holding a reference to the socket. A concurrent close can free the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990443)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990443 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Make bnx2fcrecvframe mp safe Running tests with a debug kernel shows that...

UBUNTU-CVE-2022-48715

In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Make bnx2fcrecvframe mp safe Running tests with a debug kernel shows that bnx2fcrecvframe is modifying the percpu lport stats counters in a non-mpsafe way. Just boot a debug kernel and run the bnx2fc driver with the...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a flaw in the bnx2fcrecvframe method of the scsi:bnx2fc module...

PT-2022-28952

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.8 Description The issue is related to the bnx2fc recv frame function, which has been made mp safe to address a potential security concern. The actual impact and attack plausibility have not yet been proven...

PT-2022-28865

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.22 Description The issue is related to the bnx2fc recv frame function, which has been made mp safe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28509

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.99 Description The issue is related to the bnx2fc recv frame function, which has been made mp safe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28454

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.178 Description The issue is related to the bnx2fc recv frame function, which has been made mp safe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28420

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.228 Description The issue is related to the bnx2fc recv frame function, which has been made mp safe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28370

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.300 Description The issue is related to the bnx2fc recv frame function, which has been made mp safe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28393

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.265 Description The issue is related to the bnx2fc recv frame function, which has been made mp safe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-7535

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the bnx2fc recv frame function in the Linux kernel, which modifies the per cpu lport stats counters in a non-mpsafe way. This can lead to a bug when using...